Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
File: 322e35362e3235322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hUrPMk2l14KVsF6no9D1lT+zQ7yuvgNKr41SVYLnm7o=
Subject key identifier: 34:61:53:25:E2:86:B8:85:1F:EA:37:DB:12:5D:28:F5:32:F6:D3:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5BEF024397E22C7434FEDFC0EF55BC218A210284
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 31 Oct 2024 14:05:24 +0000
ROA not before: Thu 31 Oct 2024 14:00:24 +0000
ROA not after: Thu 30 Oct 2025 14:05:24 +0000
asID: 136787
IP address blocks: 2.56.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:02:43:97:e2:2c:74:34:fe:df:c0:ef:55:bc:21:8a:21:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 31 14:00:24 2024 GMT
Not After : Oct 30 14:05:24 2025 GMT
Subject: CN=34615325E286B8851FEA37DB125D28F532F6D3AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:dc:5e:23:bb:34:b8:27:0a:9a:0d:2c:9b:
b0:06:96:aa:8a:75:a6:b6:e0:a5:1c:dd:37:a7:63:
04:0b:8b:75:f3:17:7e:f7:80:d1:4e:6c:38:2d:57:
b3:e2:a2:c4:d2:b4:72:bc:22:71:48:3d:13:dd:f7:
9f:90:7e:3f:36:92:a1:5f:f6:19:44:10:cc:2c:85:
38:9e:c1:ca:e3:5e:63:68:1c:0d:c7:c6:92:83:b3:
89:b6:62:66:ed:f9:5c:cb:e0:8c:d8:5f:84:ae:f8:
64:e0:b5:a6:f9:be:07:f0:11:6c:b5:d5:aa:d7:e3:
4e:c2:3d:49:07:6e:a1:a9:0a:78:f6:6d:8b:39:4c:
ec:4d:c4:5f:4d:96:23:a3:52:29:74:b6:f3:75:ae:
21:d7:f0:c0:3e:4b:01:60:a1:22:0e:50:07:f7:ea:
a3:35:77:b8:db:a0:00:a3:d4:29:cf:9e:8d:db:2c:
b8:05:d7:74:63:e5:53:69:f8:b8:c0:64:f3:d9:a9:
d7:3a:d9:bf:7c:8e:71:c4:6d:87:db:16:81:52:ae:
7b:2d:9d:c1:81:50:ac:e5:2b:4b:12:34:31:3e:a3:
c1:7a:f6:a5:50:60:1e:b1:bb:e3:d0:d9:a7:12:47:
ba:b1:a0:3a:5b:35:33:61:ea:15:db:10:01:9c:35:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:53:25:E2:86:B8:85:1F:EA:37:DB:12:5D:28:F5:32:F6:D3:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.252.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:e2:2c:38:ad:a7:96:9d:2d:3e:f7:e7:e3:8e:4b:ee:23:
fd:de:ce:89:1c:7e:87:78:09:6b:ca:66:e4:c2:19:88:b5:50:
56:2d:d4:0d:ed:96:7f:bf:c9:f8:1d:2f:3f:a7:49:6c:0c:f8:
10:4c:02:2d:18:59:23:76:ef:89:23:05:5c:8c:bb:dd:a6:86:
8a:40:dd:25:b0:42:ea:08:d2:62:20:b1:b9:7a:48:8a:09:fc:
4b:8c:ac:f4:4a:bc:b1:1a:97:b0:a6:a8:41:2d:8f:d6:90:79:
0a:91:01:97:92:e5:59:e3:1a:50:0c:f3:36:ec:e3:56:91:66:
df:81:ae:d7:64:77:7e:a7:ab:4b:7a:8a:de:40:7b:7b:66:3b:
af:70:3c:48:d6:6f:dc:c6:5f:15:60:20:e2:29:1e:9e:df:ad:
db:50:36:99:68:24:6e:ba:37:3d:b8:ae:e7:e2:b6:97:f1:9f:
92:95:ad:fd:c8:ca:4f:9c:23:02:4c:cc:54:b7:61:12:2b:0c:
c4:79:53:2b:c7:d6:d9:19:ad:b6:2d:d1:2c:3f:1c:95:19:02:
1c:7a:79:b7:37:fd:6b:03:c8:65:30:b0:f9:40:2b:15:79:e8:
a0:36:ca:13:36:57:b1:80:64:19:66:32:f2:27:a8:ad:8b:46:
ac:2f:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:24 2025 by rpki-client